Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4578b8-b261-4988-90d4-b477a962e365/1/GdatkCyUnpxez4lvjFAQfrZZ_-c.mft
File:                     GdatkCyUnpxez4lvjFAQfrZZ_-c.mft (raw, json)
Hash identifier:          GScCZJLPqqMjk+ocH5gP3k1Tcsn1PgKKl8+yfc47ruk=
Subject key identifier:   97:59:EB:29:A7:32:1E:34:E6:E0:4D:C3:9A:5C:80:B5:DF:3C:5E:77
Authority key identifier: 19:D6:AD:90:2C:94:9E:9C:5E:CF:89:6F:8C:50:10:7E:B6:59:FF:E7
Certificate issuer:       /CN=19d6ad902c949e9c5ecf896f8c50107eb659ffe7
Certificate serial:       018ACB5AFDFD172EDD8D88454606E1BCB902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdatkCyUnpxez4lvjFAQfrZZ_-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4578b8-b261-4988-90d4-b477a962e365/1/GdatkCyUnpxez4lvjFAQfrZZ_-c.mft
Manifest number:          0708
Signing time:             Mon 25 Sep 2023 08:00:52 +0000
Manifest this update:     Mon 25 Sep 2023 08:00:52 +0000
Manifest next update:     Tue 26 Sep 2023 08:00:52 +0000
Files and hashes:         1: GdatkCyUnpxez4lvjFAQfrZZ_-c.crl (hash: iORgaA32ek72fvvctIK4E4l4T1DjtNRB/GVe85M+d+k=)
                          2: LM4S2f81RwEev-y2JNc3ClEzBcc.roa (hash: bUYKbtDL1ejlrJf04tXR9wtR3bJdD6+NGlLDGyztNeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cb:5a:fd:fd:17:2e:dd:8d:88:45:46:06:e1:bc:b9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d6ad902c949e9c5ecf896f8c50107eb659ffe7
        Validity
            Not Before: Sep 25 08:00:52 2023 GMT
            Not After : Sep 26 08:00:52 2023 GMT
        Subject: CN=9759eb29a7321e34e6e04dc39a5c80b5df3c5e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5e:c0:60:4a:7c:c7:7e:c0:0a:4f:20:96:b0:
                    64:2f:6e:76:9a:6f:cc:3e:b1:3a:da:cc:e4:1f:2b:
                    43:b5:6c:38:10:f3:1f:df:8d:e8:df:84:8c:de:45:
                    25:d2:b3:9d:32:bf:f3:33:47:23:c2:b4:dc:4f:00:
                    08:8b:87:c4:9e:30:2b:ab:ef:86:73:e1:bb:fe:d2:
                    7f:d7:1d:9e:09:84:70:1b:56:1f:33:d2:74:c4:9a:
                    77:a1:c4:6f:5a:65:9d:cd:6e:ff:f5:88:be:75:c0:
                    06:ba:51:0b:f4:c3:c5:68:6d:1b:17:0d:60:2c:90:
                    ac:8d:34:f4:aa:a3:94:59:ec:88:6a:5b:33:d0:40:
                    6e:69:e9:ff:61:c8:d9:e2:3b:8c:af:db:cc:24:d0:
                    96:82:44:1f:78:b6:ad:44:fb:a0:4f:84:35:23:17:
                    3c:a1:77:68:69:29:e0:47:be:61:fe:9b:88:04:c9:
                    fb:dd:bc:82:fc:5d:c1:3c:70:ac:19:6f:34:05:cd:
                    37:9f:47:18:52:49:94:12:35:c7:47:e5:7f:3b:0b:
                    76:10:5c:79:b5:b9:a7:8d:d1:65:f0:e0:22:47:dd:
                    05:0e:36:65:4c:c3:9f:56:ea:42:73:81:1b:ea:54:
                    51:d9:b0:c0:8b:b2:a1:68:fe:2a:53:a3:aa:a0:1a:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:59:EB:29:A7:32:1E:34:E6:E0:4D:C3:9A:5C:80:B5:DF:3C:5E:77
            X509v3 Authority Key Identifier:
                keyid:19:D6:AD:90:2C:94:9E:9C:5E:CF:89:6F:8C:50:10:7E:B6:59:FF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdatkCyUnpxez4lvjFAQfrZZ_-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4578b8-b261-4988-90d4-b477a962e365/1/GdatkCyUnpxez4lvjFAQfrZZ_-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4578b8-b261-4988-90d4-b477a962e365/1/GdatkCyUnpxez4lvjFAQfrZZ_-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:da:9c:2a:81:0b:09:26:da:c9:b4:a6:a4:36:00:0e:1c:b2:
         11:04:63:80:50:31:ff:f1:34:cf:63:c1:a3:a5:16:cd:af:22:
         6c:db:09:46:3a:1e:8b:29:10:58:45:dd:2a:f3:5a:39:c2:50:
         8e:df:b7:7e:11:36:9b:ba:02:00:cb:2d:5e:6b:33:ff:14:8e:
         31:fb:fa:6f:62:4b:28:e4:77:0f:58:04:90:e8:9f:c6:bc:e0:
         42:5d:34:a3:08:b9:84:e0:7e:65:b7:12:76:7f:b6:50:d5:60:
         b2:f1:eb:91:a6:28:c0:54:88:40:f3:c8:5e:7d:e0:e4:f1:1a:
         e2:02:61:88:e5:e0:c1:4e:e0:f9:e8:b4:75:a3:09:53:3e:f4:
         55:64:1c:73:dc:ca:74:40:a9:c7:7e:6f:b7:80:bb:43:1b:b9:
         03:95:ed:c3:93:bb:43:8d:96:d3:48:4c:85:81:8e:69:36:68:
         53:31:b2:a2:c5:d2:28:17:58:9a:72:14:8f:2a:76:60:5d:97:
         60:ed:72:91:69:e8:31:1b:d8:7a:c3:1a:4a:75:1a:cc:b9:7b:
         4b:77:e4:a3:55:e0:71:c6:b9:cb:90:7b:c2:27:8f:81:03:e7:
         69:6c:09:0a:39:9b:f7:64:bd:b1:05:0a:66:ef:ed:12:63:89:
         be:0e:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----